chromium: update to 149.0.7827.155
* 149.0.7827.155
This update includes 33 security fixes. Below, we highlight fixes
that were contributed by external researchers.
Please see the Chrome Security Page for more information.
[N/A][516496659] Critical CVE-2026-12437: Use after free in WebShare. Reported by Google on 2026-05-25
[N/A][516947912] Critical CVE-2026-12438: Inappropriate implementation in WebView. Reported by Google on 2026-05-27
[N/A][519728275] Critical CVE-2026-12439: Use after free in Digital Credentials. Reported by Google on 2026-06-03
[N/A][519731619] Critical CVE-2026-12440: Use after free in DigitalCredentials. Reported by Google on 2026-06-03
[N/A][520157118] Critical CVE-2026-12441: Use after free in File Input. Reported by Google on 2026-06-05
[N/A][521950423] Critical CVE-2026-12442: Use after free in Passwords. Reported by Google on 2026-06-09
[N/A][522566295] Critical CVE-2026-12443: Use after free in Web Authentication. Reported by Google on 2026-06-11
[N/A][513160088] High CVE-2026-12444: Out of bounds read in Chromoting. Reported by Google on 2026-05-14
[N/A][513199795] High CVE-2026-12445: Use after free in Extensions. Reported by Google on 2026-05-14
[N/A][513313107] High CVE-2026-12446: Insufficient data validation in Passwords. Reported by Google on 2026-05-14
[N/A][513405023] High CVE-2026-12447: Heap buffer overflow in WebRTC. Reported by Google on 2026-05-15
[25 lines not shown]
xmon: Fix building with GCC 14 and GCC 15.
This code makes frequent use of K&Risms such as implicit
function declarations, implicit int, etc. Fix a few and
force an older C standard to ensure this keeps building.
xmailwatcher: Fix building with GCC 14 and GCC 15.
This code makes frequent use of K&Risms such as implicit
function declarations, implicit int, etc. Fix a few and
force an older C standard to ensure this keeps building.
srm: build fix for lethal combination of SunOS & GCC 14
doesn't include <alloca.h> which is needed on SunOS,
just define the function to the compiler builtin to avoid
needing a patch.
Support power saving via wait state enable.
Exposed through machdep.powersave sysctl. Should work on every 4XX core,
but I have no way to test on 40X, so it's disabled by default.
tremor: build fix for lethal combination of SunOS & GCC 14
doesn't include <alloca.h> which is needed on SunOS,
just define the function to the compiler builtin to avoid
needing a patch.
m17n-lib: build fix for lethal combination of SunOS & GCC 14
doesn't include <alloca.h> which is needed on SunOS,
just define the function to the compiler builtin to avoid
needing a patch.
go127: new package for Go 1.27 rc1
Go 1.27 now supports generic methods: a method declaration may declare its own
type parameters. This widely anticipated change allows adding generic functions
within the namespace of a particular data type where before one had to declare
such functions with a scope of the entire package. Note that methods of
interfaces may not declare type parameters nor can interface methods be
implemented by generic methods.
crashme: Fix building with GCC 14 and GCC 15.
This code makes frequent use of K&Risms such as implicit
function declarations, implicit int, etc. Fix a few and
force an older C standard to ensure this keeps building.
